Known vulnerabilities in IBM Cloud Pak System 2.3.0

Vendor: IBM Corporation
Software: IBM Cloud Pak System
Version: 2.3.0
Software CPE: cpe:2.3:a:ibm_corporation:ibm_cloud_pak_system:*:*:*:*:*:*:*:*
Website: https://www.ibm.com/us-en
Total vulnerabilities: 47
Public exploits: 5
Known exploited (KEV): 0
Highest CVSSv4 Score: 9.4

Vulnerabilities by Severity

Severity distribution of vulnerabilities affecting IBM Cloud Pak System version 2.3.0 IBM Cloud Pak System 2.3.0 is affected by 47 vulnerabilities: 1 critical, 12 high, 24 medium, 10 low Critical High Medium Low

Vulnerabilities (47)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU70441 - Insufficient Verification of Data Authenticity
CVE-2021-37533		 CWE-345 Low
No
No
 2.3.3.6 20.12.2022 SB2022122007
SB2022123001
SB2023011876
and 82 more
#VU70080 - Improper input validation
CVE-2022-31698		 CWE-20 Medium
Public exploit available
No
 2.3.3.6 09.12.2022 SB2022120903
SB2023040648
#VU70079 - Information Exposure Through Log Files
CVE-2022-31697		 CWE-532 Low
No
No
 2.3.3.6 09.12.2022 SB2022120903
SB2023040648
SB2023051945
and 1 more
#VU68832 - Resource exhaustion
CVE-2022-42004		 CWE-400 Medium
No
No
 2.3.3.6 31.10.2022 SB2022103116
SB2022103117
SB2022111404
and 122 more
#VU68635 - Deserialization of Untrusted Data
CVE-2022-42003		 CWE-502 Medium
No
No
 2.3.3.6 25.10.2022 SB2022102509
SB2022102510
SB2022103117
and 208 more
#VU67665 - Resource exhaustion
CVE-2022-25857		 CWE-400 Medium
No
No
 2.3.3.6 27.09.2022 SB2022092714
SB2022092728
SB2022100555
and 83 more
#VU61799 - Out-of-bounds write
CVE-2020-36518		 CWE-787 Medium
No
No
 2.3.3.6 01.04.2022 SB2022040113
SB2022040114
SB2022040115
and 147 more
#VU60186 - Out-of-bounds write
CVE-2021-44142		 CWE-787 High
Public exploit available
No
 2.3.3.6 31.01.2022 SB2022013111
SB2022013118
SB2022013119
and 36 more
#VU59053 - Improper Control of Generation of Code ('Code Injection')
CVE-2021-42550		 CWE-94 Medium
No
No
 2.3.3.6 19.12.2021 SB2021121904
SB2022022307
SB2022032929
and 21 more
#VU54856 - Resource exhaustion
CVE-2021-36374		 CWE-400 Medium
No
No
 2.3.3.6 14.07.2021 SB2021071409
SB2021072011
SB2021101927
and 43 more
#VU54855 - Resource exhaustion
CVE-2021-36373		 CWE-400 Medium
No
No
 2.3.3.6 14.07.2021 SB2021071409
SB2021072011
SB2022080830
and 16 more
#VU51511 - Improper Control of Generation of Code ('Code Injection')
CVE-2020-13936		 CWE-94 High
No
No
 2.3.3.6 16.03.2021 SB2021031618
SB2021072614
SB2022011911
and 45 more
#VU47481 - Improper input validation
CVE-2020-13956		 CWE-20 Medium
No
No
 2.3.3.6 09.10.2020 SB2020100902
SB2020101604
SB2021042104
and 77 more
#VU47428 - Permissions, Privileges, and Access Controls
CVE-2020-11979		 CWE-264 Low
No
No
 2.3.3.6 14.05.2020 SB2020100804
SB2020100815
SB2020111614
and 51 more
#VU25348 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2019-10785		 CWE-79 Low
No
No
 2.3.3.6 14.02.2020 SB2020021405
SB2022082433
SB2023040530
and 7 more
#VU14515 - Improper Restriction of XML External Entity Reference ('XXE')
CVE-2018-1000632		 CWE-611 Low
No
No
 2.3.3.6 21.08.2018 SB2018082321
SB2018120722
SB2018121006
and 20 more
#VU12420 - Permissions, Privileges, and Access Controls
CVE-2018-1313		 CWE-264 Low
No
No
 2.3.3.6 08.05.2018 SB2018050809
SB2022110302
SB2023040530
and 8 more
#VU8911 - Permissions, Privileges, and Access Controls
CVE-2016-6814		 CWE-264 Low
No
No
 2.3.3.6 20.10.2017 SB2017101714
SB2020031303
SB20200114129
and 12 more
#VU831 - Deserialization of Untrusted Data
CVE-2015-3253		 CWE-502 High
No
No
 2.3.3.6 11.10.2016 SB2020042104
SB2023030707
SB2023040530
and 5 more
#VU735 - Improper Restriction of XML External Entity Reference ('XXE')
CVE-2015-1832		 CWE-611 Low
No
No
 2.3.3.6 04.10.2016 SB2015071704
SB2020042337
SB2020102845
and 6 more


Showing elements 1 - 20 out of 47